CVE-2020-8189CWE-79

A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the…

published August 21, 2020

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01401 · 72.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-08-21T20:34Z
EPSS history
Timeline
  • 21 AUG 20:34Z
    A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the…
    cvelistv5